Installing the agent using Jamf

Forcepoint recommends to install the agent using Jamf installation method.

While deploying the agent configuration profile using Jamf, you can automatically obtain the necessary permissions and accessibility to the agent that avoids complicated administrator or user confirmation dialogs. To install the agent using Jamf, do the following:

Steps

  1. Create the endpoint SSL identity.
  2. Create the endpoint package.
  3. From the mac packages, copy FORCEPOINT-ONEENDPOINT-Mac.zip to the endpoint machine, then double-click the file to unzip the installation package.
    macOS automatically creates a directory named EndpointInstaller, which contains a file called WebsenseEndpoint.pkg and the generate_root_ca tool.
    Note: You may need to modify the generate_root_ca permissions so you can double click the generate_root_ca as an executable file. To do this, open the folder where the generate_root_ca is located and run chmod 777 generate_root_ca in the terminal.
  4. To run the generate_root_ca tool, open the folder where the generate_root_ca is located and run generate_root_ca in the terminal.
    The _ca.cer certificate and the fpnpd.dat file generates.
  5. Convert the server.pem file to the .der format using openssl command.
  6. Deploy the server.der certificate (.der files) through Jamf to all the endpoints.
  7. Deploy the following through Jamf:
    • The _ca.cer certificate.
    • Privacy Preferences Policy Control (pppc) profile (for enabling FDA & fpneone process).
    • Content filter configuration.
    • Outlook add-in.
    • Chrome extension.
    • Firefox extension. This is built-in to the installer package for deployment.
  8. Deploy the endpoint package through Jamf.